Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/zdnD6A790w6RIRaPwiqlCoVA3f8.cer
File:                     zdnD6A790w6RIRaPwiqlCoVA3f8.cer (raw, json)
Hash identifier:          QidnWviWmzHeRR56ECbsqKqE7Z3kJhIOFM1bJ4AK89w=
Subject key identifier:   CD:D9:C3:E8:0E:FD:D3:0E:91:21:16:8F:C2:2A:A5:0A:85:40:DD:FF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       AEDF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/zdnD6A790w6RIRaPwiqlCoVA3f8.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Thu 01 Feb 2024 01:21:43 +0000
Certificate not after:    Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources:    AS: 9394
                          AS: 24138
                          AS: 24425
                          AS: 38370
                          AS: 63711 -- 63716
                          IP: 36.192.0.0/11
                          IP: 43.247.240.0/22
                          IP: 61.232.0.0 -- 61.237.255.255
                          IP: 101.144.0.0/12
                          IP: 103.3.128.0/22
                          IP: 110.96.0.0/11
                          IP: 110.192.0.0/11
                          IP: 114.208.0.0/14
                          IP: 115.104.0.0/14
                          IP: 115.123.0.0/16
                          IP: 115.180.0.0/16
                          IP: 116.217.0.0/16
                          IP: 116.219.0.0/16
                          IP: 118.146.0.0/15
                          IP: 118.204.0.0/16
                          IP: 118.245.0.0/16
                          IP: 120.90.0.0/15
                          IP: 121.70.0.0/16
                          IP: 122.64.0.0/11
                          IP: 123.64.0.0/11
                          IP: 124.201.0.0/16
                          IP: 211.98.0.0/16
                          IP: 221.172.0.0/14
                          IP: 222.32.0.0/11
                          IP: 2001:e08::/32
                          IP: 240a:8000::/21

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Jun 2024 11:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44767 (0xaedf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Feb  1 01:21:43 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=CDD9C3E80EFDD30E9121168FC22AA50A8540DDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:b5:dc:a1:bb:8a:e2:c6:6a:d0:eb:df:83:
                    2a:9d:e8:1a:fd:15:89:23:f9:64:b8:c5:02:9a:f8:
                    8f:84:aa:7e:a7:1c:c3:ba:c7:f7:14:43:5e:9b:a2:
                    90:45:82:74:07:60:e3:e5:b9:09:f5:83:b3:7a:31:
                    7d:e4:7a:f4:0d:da:93:ff:be:d6:b9:16:04:c3:3a:
                    64:ef:9b:a5:1b:ca:f0:ff:21:7f:01:d9:b3:6b:9a:
                    5b:98:44:52:86:05:bf:c6:bd:0b:b5:a8:6c:59:03:
                    e3:90:5c:30:e5:ad:23:9e:d6:9f:df:c5:71:c8:89:
                    e0:70:e9:50:35:ca:da:06:ed:2e:ea:c6:8c:ca:77:
                    b2:ff:a6:22:b5:77:67:f1:a8:7b:b3:26:4f:aa:1f:
                    f8:1b:bf:81:e2:07:2c:8b:4b:42:35:ae:20:0a:a1:
                    f9:b2:af:80:98:42:61:5d:a2:2f:c0:d9:c0:1c:ae:
                    9f:83:fe:51:7b:36:1d:03:1b:6b:69:d8:9f:2d:48:
                    10:9f:ce:63:ea:9c:88:da:29:a9:7a:4e:52:c8:4b:
                    1d:92:15:4e:35:bf:84:e5:37:71:5d:a5:f7:ac:08:
                    97:ab:20:28:ec:4b:95:6f:77:0d:cc:b4:84:1b:dc:
                    c9:9e:46:69:92:fa:b7:95:0a:4d:a8:df:a2:cf:24:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D9:C3:E8:0E:FD:D3:0E:91:21:16:8F:C2:2A:A5:0A:85:40:DD:FF
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8/zdnD6A790w6RIRaPwiqlCoVA3f8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9394
                  24138
                  24425
                  38370
                  63711-63716

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.192.0.0/11
                  43.247.240.0/22
                  61.232.0.0-61.237.255.255
                  101.144.0.0/12
                  103.3.128.0/22
                  110.96.0.0/11
                  110.192.0.0/11
                  114.208.0.0/14
                  115.104.0.0/14
                  115.123.0.0/16
                  115.180.0.0/16
                  116.217.0.0/16
                  116.219.0.0/16
                  118.146.0.0/15
                  118.204.0.0/16
                  118.245.0.0/16
                  120.90.0.0/15
                  121.70.0.0/16
                  122.64.0.0/11
                  123.64.0.0/11
                  124.201.0.0/16
                  211.98.0.0/16
                  221.172.0.0/14
                  222.32.0.0/11
                IPv6:
                  2001:e08::/32
                  240a:8000::/21

    Signature Algorithm: sha256WithRSAEncryption
         45:d1:4d:29:c9:45:58:52:90:29:0a:43:bc:c6:29:45:38:f6:
         35:0b:d0:5a:ba:15:65:40:57:d6:0f:33:bf:57:5b:35:48:dc:
         62:14:ff:e7:4b:72:7e:26:5d:5b:b8:bc:5e:aa:6d:d0:cc:9a:
         7a:30:b4:94:a6:65:2c:a9:54:ea:56:e2:35:f5:e3:08:6d:c5:
         e2:40:00:d3:f7:c3:b1:f8:4e:9b:ae:b2:cc:7a:61:d1:f6:84:
         bd:97:34:cc:c3:bd:63:97:92:f7:df:19:20:c6:21:f2:0e:79:
         55:ca:9b:c2:58:df:fb:5c:c3:cc:6d:a5:3b:46:40:6f:a8:7a:
         aa:97:91:09:e6:50:01:32:ed:ae:e8:d5:73:42:93:d0:e8:4c:
         e6:66:39:a4:cd:98:88:17:b9:77:90:5e:68:77:86:17:8c:35:
         09:0c:51:b3:df:14:24:47:b6:87:8d:b2:58:8c:28:5c:59:65:
         8c:72:f3:1f:2c:43:07:6c:93:a9:d0:a8:12:ff:9b:f5:8c:89:
         55:43:15:bd:5e:8c:f0:55:a7:be:9c:dd:86:e9:5d:2c:da:64:
         53:db:61:85:c2:dd:38:e1:d8:b6:36:e9:59:ec:a3:4d:81:92:
         48:fe:26:80:e2:e5:28:e2:ee:c8:a1:aa:67:7a:19:ab:58:99:
         f3:79:0a:8c
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgIDAK7fMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIxNDNaFw0yNTAxMzEwMTEzNDZaMDMx
MTAvBgNVBAMTKENERDlDM0U4MEVGREQzMEU5MTIxMTY4RkMyMkFBNTBBODU0MERE
RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhrXcobuK4sZq0Ovf
gyqd6Br9FYkj+WS4xQKa+I+Eqn6nHMO6x/cUQ16bopBFgnQHYOPluQn1g7N6MX3k
evQN2pP/vta5FgTDOmTvm6UbyvD/IX8B2bNrmluYRFKGBb/GvQu1qGxZA+OQXDDl
rSOe1p/fxXHIieBw6VA1ytoG7S7qxozKd7L/piK1d2fxqHuzJk+qH/gbv4HiByyL
S0I1riAKofmyr4CYQmFdoi/A2cAcrp+D/lF7Nh0DG2tp2J8tSBCfzmPqnIjaKal6
TlLISx2SFU41v4TlN3FdpfesCJerICjsS5Vvdw3MtIQb3MmeRmmS+reVCk2o36LP
JNaJAgMBAAGjggMYMIIDFDAdBgNVHQ4EFgQUzdnD6A790w6RIRaPwiqlCoVA3f8w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHSBggrBgEFBQcBCwSBxTCBwjA2BggrBgEF
BQcwBYYqcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzgv
MFUGCCsGAQUFBzAKhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvOC96ZG5ENkE3OTB3NlJJUmFQd2lxbENvVkEzZjgubWZ0MDEGCCsGAQUF
BzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1sMDIGCCsG
AQUFBwEIAQH/BCMwIaAfMB0CAiSyAgJeSgICX2kCAwCV4jAKAgMA+N8CAwD45DCB
swYIKwYBBQUHAQcBAf8EgaMwgaAwgYgEAgABMIGBAwMFJMADBAIr9/AwCgMDAz3o
AwMBPewDAwRlkAMEAmcDgAMDBW5gAwMFbsADAwJy0AMDAnNoAwMAc3sDAwBztAMD
AHTZAwMAdNsDAwF2kgMDAHbMAwMAdvUDAwF4WgMDAHlGAwMFekADAwV7QAMDAHzJ
AwMA02IDAwLdrAMDBd4gMBMEAgACMA0DBQAgAQ4IAwQDJAqAMA0GCSqGSIb3DQEB
CwUAA4IBAQBF0U0pyUVYUpApCkO8xilFOPY1C9BauhVlQFfWDzO/V1s1SNxiFP/n
S3J+Jl1buLxeqm3QzJp6MLSUpmUsqVTqVuI19eMIbcXiQADT98Ox+E6brrLMemHR
9oS9lzTMw71jl5L33xkgxiHyDnlVypvCWN/7XMPMbaU7RkBvqHqql5EJ5lABMu2u
6NVzQpPQ6EzmZjmkzZiIF7l3kF5od4YXjDUJDFGz3xQkR7aHjbJYjChcWWWMcvMf
LEMHbJOp0KgS/5v1jIlVQxW9XozwVae+nN2G6V0s2mRT22GFwt044di2NulZ7KNN
gZJI/iaA4uUo4u7IoapnehmrWJnzeQqM
-----END CERTIFICATE-----
Generated at Sat Jun 15 06:39:12 2024 by rpki-client on console-ams.rpki-client.org